WrappedKeyEntry Class

Definition

[Android.Runtime.Register("android/security/keystore/WrappedKeyEntry", ApiSince=28, DoNotGenerateAcw=true)]
public class WrappedKeyEntry : Java.Lang.Object, IDisposable, Java.Interop.IJavaPeerable, Java.Security.KeyStore.IEntry

[<Android.Runtime.Register("android/security/keystore/WrappedKeyEntry", ApiSince=28, DoNotGenerateAcw=true)>]
type WrappedKeyEntry = class
    inherit Object
    interface KeyStore.IEntry
    interface IJavaObject
    interface IDisposable
    interface IJavaPeerable

Inheritance

Object

Object

WrappedKeyEntry

Attributes

RegisterAttribute

Implements

IJavaObject IJavaPeerable KeyStore.IEntry IDisposable

Remarks

An Entry that holds a wrapped key. Wrapped keys contain encrypted key data and description information that can be used to securely import key material into a hardware-backed Keystore.

The wrapped key is in DER-encoded ASN.1 format, specified by the following schema:

KeyDescription ::= SEQUENCE(
                    keyFormat INTEGER,                   # Values from KeyFormat enum.
                    keyParams AuthorizationList,
                )

                SecureKeyWrapper ::= SEQUENCE(
                    version INTEGER,                     # Contains value 0
                    encryptedTransportKey OCTET_STRING,
                    initializationVector OCTET_STRING,
                    keyDescription KeyDescription,
                    encryptedKey OCTET_STRING,
                    tag OCTET_STRING
                )

<ul> <li>keyFormat is an integer from the KeyFormat enum, defining the format of the plaintext key material. </li> <li>keyParams is the characteristics of the key to be imported (as with generateKey or importKey). If the secure import is successful, these characteristics must be associated with the key exactly as if the key material had been insecurely imported with importKey. See Key Attestation for the AuthorizationList format. </li> <li>encryptedTransportKey is a 256-bit AES key, XORed with a masking key and then encrypted in RSA-OAEP mode (SHA-256 digest, SHA-1 MGF1 digest) with the wrapping key specified by wrappingKeyBlob. </li> <li>keyDescription is a KeyDescription, above. </li> <li>encryptedKey is the key material of the key to be imported, in format keyFormat, and encrypted with encryptedEphemeralKey in AES-GCM mode, with the DER-encoded representation of keyDescription provided as additional authenticated data. </li> <li>tag is the tag produced by the AES-GCM encryption of encryptedKey. </li> </ul>

Imported wrapped keys will have KeymasterDefs.KM_ORIGIN_SECURELY_IMPORTED

Java documentation for android.security.keystore.WrappedKeyEntry.

Portions of this page are modifications based on work created and shared by the Android Open Source Project and used according to terms described in the Creative Commons 2.5 Attribution License.

Constructors

Properties

Methods

Explicit Interface Implementations

Extension Methods

Applies to